A Performance Evaluation of Web Services Security

Author

Tang, Kezhe ; Chen, Shiping ; Levy, David ; Zic, John ; Yan, Bo

Author_Institution

Sch. of Electr. & Inf. Eng., Sydney Univ., NSW

fYear

2006

fDate

Oct. 2006

Firstpage

67

Lastpage

74

Abstract

Web services security (WSS) has been approved as a standard by OASIS and widely adopted in the industry as a solution for enhancing the security of Web services. However, the performance of WSS remains a concern due to the additional security contents added to SOAP message and the extra service time for processing these security contents. This paper aims at clarifying this concern by conducting a performance evaluation of WSS. A simple Web service is designed and used for performance testing with a variety of WSS polices and message sizes. The test results are categorized, compared and analyzed to work out the overheads for individual security setting. This work is expected to provide an overview and guidance for WSS performance overhead

Keywords

Web services; security of data; software performance evaluation; SOAP; Web services security; performance evaluation; performance testing; Cryptography; Data security; Information security; Laboratories; Middleware; Simple object access protocol; Testing; Transport protocols; Web services; XML;

fLanguage

English

Publisher

ieee

Conference_Titel

Enterprise Distributed Object Computing Conference, 2006. EDOC '06. 10th IEEE International

Conference_Location

Hong Kong

ISSN

1541-7719

Print_ISBN

0-7695-2558-X

Type

conf

DOI

10.1109/EDOC.2006.12

Filename

4031196